Add WebDAV support for Nginx
In compiling nginx know there is a "–with-http_dav_module" of such a parameter, but really let me have to actually be used for this feature, say something surprisingly – solve the problem of cotton using Android phone through SFTP access to Mac OS x video resources.WebDAV (web-based Distributed Authoring and Versioning) a communication protocol based on the HTTP 1.1 protocol. It extends HTTP 1.1, adding new methods beyond
Introduction to 0X01 Vulnerabilities
Windows Server is a series of server operating systems released by Microsoft. Internet Information Services (IIS) is an internet-based basic service that runs in Microsoft Windows. A buffer overflow vulnerability exists in the ' scstoragepathfromurl ' function of the WebDAV service in the version of IIS 6.0 in Microsoft Windows Server 2003 R2. Remote attackers can use this vulnerability to execute arbitrary code b
1. First describe the HTTP common methods
Get gets the specified resource
POST submits data to the specified resource for processing requests
Head gets the specified resource header information
PUT replaces the specified resource (browser operation not supported)
Delete Deletes the specified resource
OPTIONS allows clients to view server performance
TRACE echo the request received by the server, primarily for testing or diagnostics
Connect is reserved for pro
Vulnerability Description:March 27, using IIS 6.0 on Windows 2003 R2 burst the 0Day Vulnerability (cve-2017-7269), the exploit POC began to circulate, but the bad thing is that the product has stopped updating. The download link to the POC online is as follows.GitHub Address: Https://github.com/edwardz246003/IIS_exploitCombined with the above POC, we analyze the cause of the vulnerability and the process of its utilization. In the analysis process, the POC exploit use of the technique is amazed,
Using the Webdav command line client under tulinux Method 1: With davfs2: # apt-getinstalldavfs2 # mkdir/media/akann # mount-tdavfshttp: // Login
Webdav command line client in Ubuntu Linux
Method 1: Use davfs2:
# Apt-get install davfs2
# Mkdir/media/akann
# Mount-t davfs http://www.linuxidc.com/dir/media/akann
In this way, you can copy and copy files like normal files, but the davfs file system cannot
WebDav can be used entirely as a network share file server! # 1. Two configuration files have been modified # 2. Create a user name and password for the Web Access user # 3. Two directories are created and administrative permissions are set # Switch Directories$ cd/etc/apache2$ sudo vim httpd.conf# Find httpd-dav.conf /httpd-dav.conf" remove beginning of line #" # position the cursor at the beginning of the line0# Delete Comments at the begin
IOS7 's nsurlsession simplifies nsurlconnection file uploads and downloads, and this article records how to configure the WebDAV service to support put-style file uploads.
I. Configuring a WebDAV Server
1. Modify Httpd.conf
1> Open the terminal, and then enter:
cd/etc/apache2/
sudo vi httpd.conf
2> Input in VI
/httpd-dav.conf
Find httpd-dav.conf
3> the line's first # comment Delete
4> Save and exi
First register a nut cloud account, there is a 1g of space.Then make sure that your Windows opens the WebClient serviceThen in the top right corner of the nut cloud drop-down menu-Account info-security options, add an app password below, apply the name arbitrarily. After adding the server address is fixed this https://dav.jianguoyun.com/dav/, the account is the NUT cloud registered account (usually mailbox), password is just add the application password, these three things to use later.And then
I. Function Description:
Add calendar in ekp's personal calendar to synchronize to exchange.
Exchange: Microsoft's mail server platform, used earlier to compete with Domino. Provides exchange workflows and multiple development interfaces, such as CdO and WebDAV.
Use Cases: the customer has or is more dependent on the use of exchange, from exchange to Domino OA platform.
Other functions can also be implemented: Mail, address book synchronizat
To disable the Tomcat6 WebDAV module:Description: After opening the WebDAV module, the Web can be uploaded, downloaded, modified and deleted via command line or client, such as bad control will bring security hidden trouble.# vi/var/lib/tomcat6/conf/web.conf (added under Press A or I to enter edit modePress the ESC key to exit edit mode: Wq (Exit and save)# Service Tomcat6 RestartVerify:Download:$ curl-v-X
If WebDAV is not HTTPS, Win7 is not added by default, you need to modify the registry so that WIN7 supports HTTP and HTTPS at the same time, only HTTPS is supported by default, and then restart the serviceA server that has a WebDAV configured. Using an Apple Computer as a client can successfully add a network disk, but WIN7 is not.After the search data, according to the data to solve the problem.The origina
The cause of this problem can be determined by the network monitor trace. Generally, packets need to be captured on the client, server, and at the same time.
Analyze the following steps:
1. time when the client sends a request.
2. Time when the server accepts the request.
3. the server sends the corresponding time.
4. The client accepts the corresponding time.
5. The next time the client sends a request.
The transmission speed of the network can be seen from 1, 2.
From 2, 3, we can s
/*********************************************************************************************In iOS development, it is often necessary to perform various functional tests with the backend server, in which case the WebDAV in HTTP mode is often encountered and put tested. Because there are few configuration methods specifically for Mac systems in the network, it is not easy for iOS beginners to find a reference, The result is a lot of confusion and dou
(a) Simple Apache server Build!For file de upload, download, modify, delete!-----------Apache1. Use the widest Web Server, support the execution of various scripts (PHP) 2. Mac comes with, only need to modify a few configuration can, simple, fast 3. Some special server functions,Apache can be very good support For example:HTTP put/delete operation, knowledge supplement involves the HTTPS service -WebDavHTTP protocol-based "file" serverImplement file upload/download/modify/delete-FTPFil
China Telecom Tianyi unified points merchant self-service platform has WebDAV write permission vulnerability
First of all, we did not use this vulnerability to obtain Webshell. However, it is highly risky to directly PUT the file, and the Tianyi platform is important. Therefore, the self-evaluation is medium-risk 5.
Website homepage:
The directory with the write permission isHttp: // 116.228.55.142: 7006/permerchant/First, use the OPTIONS method
90% exchange mail management developed using WebDAV (5)
-- The remaining 10% is used for sending emails.
In the above article, I know the basic format of the mail, but I still have no way to use WebDAV to construct an email with an attachment. Although the basic idea is as follows: UseCodeGenerate randomBoundaryString, and then convert the uploaded file to base64 encoding, and attach it to the email. How
If you need to accessExchangeServer. You can use the WebDAV protocol. The following are some references and examples.Exchange WebDAVFor more information about development, see MsdnThe following content:
Properties by namespace
Http://msdn.microsoft.com/library/en-us/e2k3/e2k3/wss_references_nsproperties.asp
Exchange store SQL
Http://msdn.microsoft.com/library/en-us/e2k3/e2k3/_exch2k_ SQL _web_storage_system_ SQL .asp
ExplodingcanHttps://github.com/danigargu/explodingcanAn implementation of Explodingcan ' s exploit extracted from Fuzzbunch, the "Metasploit" of the NSA.Details
Vulnerability:microsoft IIS WebDav ' scstoragepathfromurl ' Remote Buffer Overflow
cve:cve-2017-7269
Disclosure Date:march 31 2017
Affected Product:microsoft Windows Server 2003 R2 SP2 x86
Why?Months ago I needed to study this exploit, and finally I implemented it in
Linux file System (FUSE) to access Dropbox, Sugarsync, Amazon S3, Google Storage, Google Drive or WebDAV servers.http://joe42.github.com/CloudFusion/Https://github.com/joe42/CloudFusion-------------------------------------------------Fuse is also a way to:A FUSE wrapper around MongoDB ' s GridfsHttps://github.com/mikejs/gridfs-fuseA usermode hookable Filesystem Libraryhttp://osrg.github.io/earthquake/subprojects/Https://github.com/osrg/hookfsRust Libr
Introduction
To define a variable in the source file that is related to the line number, it is too slow to manually enter each time. This article describes how to use macro definitions to define variables related to line numbers.
For example, we want to define a shape variable such as a_10 in the 10th line of the source code. use macro definition to accomplish
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.
A Free Trial That Lets You Build Big!
Start building with 50+ products and up to 12 months usage for Elastic Compute Service